Static task
static1
Behavioral task
behavioral1
Sample
a56043f60e8acb675b095f2df26c245ddf069b385c76629efbc728cdd8e138f9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a56043f60e8acb675b095f2df26c245ddf069b385c76629efbc728cdd8e138f9.exe
Resource
win10v2004-20221111-en
General
-
Target
a56043f60e8acb675b095f2df26c245ddf069b385c76629efbc728cdd8e138f9
-
Size
14KB
-
MD5
6613c49784dbb97ebf19632f72071797
-
SHA1
2028922edec40b8e98c294590745747f4a3e12f9
-
SHA256
a56043f60e8acb675b095f2df26c245ddf069b385c76629efbc728cdd8e138f9
-
SHA512
1c1db10ee6e7b5a89b6a290476306ddee25fae3c713d75f56209d81bfb7ceac78f047f4547a8e1e2abe5c3933e7f93c10f61688dec0dd38eebd67cd6248f488d
-
SSDEEP
192:9kUYxqcP03iTaR68TX7IXqXkEVIlRZQrzgjaKreNHKDv7:91YF03tD7I6XkEVI9Mzwrz
Malware Config
Signatures
Files
-
a56043f60e8acb675b095f2df26c245ddf069b385c76629efbc728cdd8e138f9.exe windows x86
34366418af51f5cfb82543dc88b1fbe3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetModuleFileNameA
GetFileAttributesW
GetThreadLocale
GetCurrentThreadId
lstrcpyA
SwitchToThread
TlsSetValue
GetUserDefaultLCID
IsDBCSLeadByte
TlsGetValue
GetOEMCP
GetSystemDefaultLCID
AddAtomA
TlsFree
DeleteFileA
FindFirstVolumeMountPointA
GetDriveTypeA
VirtualAlloc
GetCommandLineA
lstrcatA
user32
InvalidateRect
GetDC
IsWindowVisible
ReleaseDC
GetForegroundWindow
GetClassInfoExA
ReleaseDC
ShowWindow
GetFocus
GetWindowTextLengthA
GetWindow
CloseWindow
IsIconic
ValidateRect
GetWindowTextA
GetWindowLongA
RegisterClassA
GetSystemMetrics
GetActiveWindow
psapi
GetWsChanges
GetModuleBaseNameA
EnumPageFilesA
EmptyWorkingSet
GetModuleInformation
GetMappedFileNameA
msasn1
ASN1BERDecCheck
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ